wrap update functions in eval.secure